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Amendment/Response dated T~- 9— c?"7 

Response to Final Office action dated March 19, 2007 



REMARKS/ARGUMENTS 

The applicant would like to acknowledge, with thanks, the Office Action that was mailed 
on March 19, 2007. This amendment is responsive to the March 19, 2007 Office Action. 

By this amendment, independent claims 71, 82 and 90 have been amended. The element 
that the AP is the authenticator for the wireless client is not new matter as it is disclosed on page 
6, lines 14-27 of the original specification. The element that the AP receives the session key is 
not new matter as it is disclosed on page 9, lines 12-13 of the original specification. Claims 94- 
100 have been canceled 

PRIOR ART REJECTIONS 

Claims 71-100 stand rejected under 35 U.S.C. § 102(e) as being anticipated by U.S. 
Patent No. 7,042,988 to Juitt (hereinafter Juitt). For reasons that will now be set forth, the 
claims as currently standing in this application are not anticipated by Juitt. 

Independent claims 71 and 82 as currently amended, recite a system comprising an 
authentication server disposed on a network. A first authenticator (e.g. switch) is coupled to the 
network and communicatively coupled to the authentication server. A second authenticator (e.g. 
an access point) authenticates with the authentication server through the first authenticator. This 
establishes a secure communication channel between the first and second authenticators. When a 
supplicant (e.g. a wireless client) attempts to associate with the second authenticator, the second 
authenticator authenticates the supplicant with the authentication server through the secure 
communication channel established with the first authenticator. Because there is a secure 
communications channel established between the first and second authenticators, the second 
authenticator allows the first authenticator to authenticate the supplicant with the authentication 
server. To summarize, the first authenticator is an authenticator for the second authenticator, 
and the second authenticator is the authenticator for a supplicant. Claim 90 recites a 
methodology used by a second authenticator (e.g. an access point) such as may be used in the 
example embodiments recited in claims 71 and 82. 

By contrast, Juitt uses a gateway server (functionally the equivalent of the switch) to 
authenticate mobile users, not the access points (see Abstract "Use of such a gateway server 
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allows substantial control to be gained over network access even with the use of relatively simple 
access points", col. 8 line 66 - col. 9 line 2; col. 10, lines 53-56; col. 11, lines 19-21; col. 14 lines 
12-14). The gateway server may establish an encrypted and authenticated session with access 
points (col. 8, lines 39-42). However, unlike what is recited in claims 71, 82 and 90, the 
gateway server (switch) is the authenticator for wireless clients, not the access points. Thus, Juitt 
does not disclose each and every elemeent of claims 71, 82 and 90. 

In addition to the reasons just set forth for claim 71, claim 101 recites that data 
representative of the session key for the wireless client is delivered to the AP responsive to a 
successful authentication. Juitt does not disclose this element. In Juitt, the gateway server 
functions as the authenticator and thus the session key would be delivered form the 
authentication server to the gateway server, not the AP. 

Claims 72-80, 83-89, and 91-93 directly depend from claims 71, 82 and, 90 respectively 
and therefore contain each and every element of claims 71, 82 and 90 respectively. Therefore, 
for the reasons already set forth for claims 71, 82 and 90, claims 72-80, 83-89 and 91-93 are not 
anticipated by Juitt. 

CONCLUSION 

If there are any fees necessitated by the foregoing communication, the Commissioner is 
hereby authorized to charge such fees to our Deposit Account No. 50-0902, referencing our 
Docket No. 72255/08267. 
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